#3792: enter.c:replace_part() undefined behavior
----------------------------+----------------------
 Reporter:  Safari          |      Owner:  mutt-dev
     Type:  defect          |     Status:  new
 Priority:  major           |  Milestone:
Component:  user interface  |    Version:  1.5.24
 Keywords:                  |
----------------------------+----------------------
 savelen can be 0, so savebuf is then NULL, and it does memcpy in two
 places for savebuf.

 to trigger: in Open mailbox prompt, tab-complete to a mailbox (e.g.,
 "=recei<TAB>").

-- 
Ticket URL: <http://dev.mutt.org/trac/ticket/3792>
Mutt <http://www.mutt.org/>
The Mutt mail user agent

Reply via email to